Vulnerabilities

Fortinet Patches Critical Authentication Bypass Vulnerabilities

Fortinet, patch, Vulnerabilities, vulnerability /

Fortinet Patches Critical Authentication Bypass Vulnerabilities 2025-12-10 at 15:18 By Ionut Arghire The two security defects impact FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager with FortiCloud SSO login authentication enabled. The post Fortinet Patches Critical Authentication Bypass Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Fortinet Patches Critical Authentication Bypass Vulnerabilities Read More »

Ivanti EPM Update Patches Critical Remote Code Execution Flaw

Ivanti, Vulnerabilities, vulnerability /

Ivanti EPM Update Patches Critical Remote Code Execution Flaw 2025-12-10 at 14:39 By Ionut Arghire The XSS vulnerability could allow remote attackers to execute arbitrary JavaScript code with administrator privileges. The post Ivanti EPM Update Patches Critical Remote Code Execution Flaw appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Ivanti EPM Update Patches Critical Remote Code Execution Flaw Read More »

SAP Patches Critical Vulnerabilities With December 2025 Security Updates

patch, SAP, Vulnerabilities, vulnerability /

SAP Patches Critical Vulnerabilities With December 2025 Security Updates 2025-12-10 at 14:39 By Ionut Arghire Affecting Solution Manager, Commerce Cloud, and jConnect SDK, the bugs could lead to code injection and remote code execution. The post SAP Patches Critical Vulnerabilities With December 2025 Security Updates appeared first on SecurityWeek. This article is an excerpt from

SAP Patches Critical Vulnerabilities With December 2025 Security Updates Read More »

Microsoft Patches 57 Vulnerabilities, Three Zero-Days

Featured, Patch Tuesday, Vulnerabilities, vulnerability, Windows, Zero-Day /

Microsoft Patches 57 Vulnerabilities, Three Zero-Days 2025-12-10 at 00:44 By Ionut Arghire Microsoft has addressed a Windows vulnerability exploited as zero-day that allows attackers to obtain System privileges. The post Microsoft Patches 57 Vulnerabilities, Three Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches 57 Vulnerabilities, Three Zero-Days Read More »

Adobe Patches Nearly 140 Vulnerabilities

Adobe, patches, Vulnerabilities, vulnerability /

Adobe Patches Nearly 140 Vulnerabilities 2025-12-10 at 00:44 By Ionut Arghire The Experience Manager security update resolves 117 vulnerabilities, including 116 identified as cross-site scripting (XSS) bugs. The post Adobe Patches Nearly 140 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Adobe Patches Nearly 140 Vulnerabilities Read More »

Critical Apache Tika Vulnerability Leads to XXE Injection

Apache, Apache Tika, Vulnerabilities, vulnerability /

Critical Apache Tika Vulnerability Leads to XXE Injection 2025-12-08 at 13:58 By Ionut Arghire The bug allows attackers to carry out XML External Entity (XXE) injection attacks via crafted XFA files inside PDF files. The post Critical Apache Tika Vulnerability Leads to XXE Injection appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Critical Apache Tika Vulnerability Leads to XXE Injection Read More »

Exploitation of React2Shell Surges

exploited, Featured, React, React2Shell, Vulnerabilities, vulnerability /

Exploitation of React2Shell Surges 2025-12-08 at 12:00 By Eduard Kovacs An increasing number of threat actors have been attempting to exploit the React vulnerability CVE-2025-55182 in their attacks. The post Exploitation of React2Shell Surges appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Exploitation of React2Shell Surges Read More »

Chinese Hackers Exploiting React2Shell Vulnerability

exploited, Featured, React, React2Shell, Vulnerabilities, vulnerability /

Chinese Hackers Exploiting React2Shell Vulnerability 2025-12-05 at 10:30 By Eduard Kovacs AWS has seen multiple China-linked threat groups attempting to exploit the React vulnerability CVE-2025-55182. The post Chinese Hackers Exploiting React2Shell Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese Hackers Exploiting React2Shell Vulnerability Read More »

React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability

Application Security, Featured, React, Vulnerabilities, vulnerability /

React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability 2025-12-04 at 12:11 By Eduard Kovacs A researcher has pointed out that only instances using a newer feature are impacted by CVE-2025-55182. The post React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React2Shell: In-the-Wild Exploitation Expected for Critical React Vulnerability Read More »

SpiderLabs Ransomware Tracker Update November 2025: Qlin, Cl0p, and Akira Vie for Top Attacker

data breach, Security Research, Vulnerabilities /

SpiderLabs Ransomware Tracker Update November 2025: Qlin, Cl0p, and Akira Vie for Top Attacker 2025-12-03 at 16:04 By Trustwave SpiderLabs ransomware tracker noted a slight dip in the overall number of attacks that took place in November 2025, but the research team saw the threat group Cl0p surge, conducting 98 attacks during the month, up

SpiderLabs Ransomware Tracker Update November 2025: Qlin, Cl0p, and Akira Vie for Top Attacker Read More »

Sha1-Hulud: The Second Coming of The New npm GitHub Worm

data breach, Emerging Threats, Vulnerabilities /

Sha1-Hulud: The Second Coming of The New npm GitHub Worm 2025-12-03 at 16:04 By Karl Sigler Sha1-Hulud is back with a new evolution of its supply-chain attack that targets development environments via Node Package Manager (npm). npm is a very popular package manager for Node.js that provides millions of predeveloped packages of code to be

Sha1-Hulud: The Second Coming of The New npm GitHub Worm Read More »

Critical King Addons Vulnerability Exploited to Hack WordPress Sites

exploited, Vulnerabilities, vulnerability, WordPress /

Critical King Addons Vulnerability Exploited to Hack WordPress Sites 2025-12-03 at 15:39 By Ionut Arghire A critical-severity vulnerability in the King Addons for Elementor plugin for WordPress has been exploited to take over websites. The post Critical King Addons Vulnerability Exploited to Hack WordPress Sites appeared first on SecurityWeek. This article is an excerpt from

Critical King Addons Vulnerability Exploited to Hack WordPress Sites Read More »

Microsoft Silently Mitigated Exploited LNK Vulnerability

Endpoint Security, Featured, LNK, Microsoft, patch, Vulnerabilities, Windows /

Microsoft Silently Mitigated Exploited LNK Vulnerability 2025-12-03 at 14:35 By Ionut Arghire Windows now displays in the properties tab of LNK files critical information that could reveal malicious code. The post Microsoft Silently Mitigated Exploited LNK Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Silently Mitigated Exploited LNK Vulnerability Read More »

Chrome 143 Patches High-Severity Vulnerabilities

Chrome, Vulnerabilities, vulnerability /

Chrome 143 Patches High-Severity Vulnerabilities 2025-12-03 at 10:52 By Ionut Arghire Chrome 143 stable was released with patches for 13 vulnerabilities, including a high-severity flaw in the V8 JavaScript engine. The post Chrome 143 Patches High-Severity Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome 143 Patches High-Severity Vulnerabilities Read More »

Android’s December 2025 Updates Patch Two Zero-Days

Android, exploited, Featured, Mobile & Wireless, Vulnerabilities, vulnerability, Zero-Day /

Android’s December 2025 Updates Patch Two Zero-Days 2025-12-02 at 15:15 By Ionut Arghire Google warns that two out of the 107 vulnerabilities patched in Android this month have been exploited in limited, targeted attacks. The post Android’s December 2025 Updates Patch Two Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Android’s December 2025 Updates Patch Two Zero-Days Read More »

CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack

CISA KEV, exploited, Featured, HMI, ICS, ICS/OT, OpenPLC, OT, ScadaBR, Vulnerabilities, vulnerability /

CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack 2025-12-01 at 13:14 By Eduard Kovacs CISA has added CVE-2021-26829 to its Known Exploited Vulnerabilities (KEV) catalog. The post CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack Read More »

Black Friday 2025: Aligning Cyber Resilience and Business Goals to Protect Your Retail Business

data breach, Tips & Tricks, Vulnerabilities /

Black Friday 2025: Aligning Cyber Resilience and Business Goals to Protect Your Retail Business 2025-11-25 at 17:04 By Black Friday Cyber Threats: As retail sales peak, cybercriminals ramp up attacks, targeting vulnerabilities in retail businesses during the holiday rush. Retailers Under Siege: In 2025, a significant number of retailers, including major brands, experienced increased cyberattacks,

Black Friday 2025: Aligning Cyber Resilience and Business Goals to Protect Your Retail Business Read More »

Fluent Bit Vulnerabilities Expose Cloud Services to Takeover

Cloud, cloud security, Fluent Bit, Vulnerabilities, vulnerability /

Fluent Bit Vulnerabilities Expose Cloud Services to Takeover 2025-11-25 at 15:47 By Ionut Arghire Five flaws in the open source tool may lead to path traversal attacks, remote code execution, denial-of-service, and tag manipulation. The post Fluent Bit Vulnerabilities Expose Cloud Services to Takeover appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Fluent Bit Vulnerabilities Expose Cloud Services to Takeover Read More »

CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability

exploited, Oracle, Vulnerabilities /

CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability 2025-11-24 at 17:48 By Eduard Kovacs CISA has added CVE-2025-61757 to its Known Exploited Vulnerabilities (KEV) catalog.  The post CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability Read More »

Scroll to Top